Web Gateway 7.1.5 Product Guide - McAfee

8
Monitoring
Error handling
Handle License Incidents
This nested error handling rule set handles measures taken when an incident occurs that involves the
expiration date of the license for your appliance.
Nested error handling rule set — Handle License Incidents
Criteria — Incident.ID equals 200
The rule set criteria specifies that the rule set applies when the value of the Incident.ID property is 200,
which indicates that the remaining number of days for your licence has been checked.
The rule set contains the following rules:
Create license incident message
Always –> Continue — Set User-Defined.notificationMessage =
“License expires in ”
+ Number.ToString (License.RemainingDays)
+ “ days”
The rule is always executed when the criteria of its rule set is matched. The rule then uses an
event to set a user-defined property to a chain of values that make up a message text on the
remaining number of days for your license.
The Continue action lets processing continue with the next rule.
Create syslog entry and other rules
Always (or other criteria) –> Continue — ...
The Create syslog enty rule and other rules in the rule set use different events to take measures if
the respective rule criteria is matched.
Note: These rules are not enabled by default.
Block on Anti-Malware Engine Errors
This nested error handling rule set blocks access to all web objects when the Anti-Malware module
cannot be loaded or is overloaded.
Nested error handling rule set — Block on Anti-Malware
Engine Errors
Criteria — Always
The rule set contains the following rules:
Block if Anti-Malware engine cannot be loaded
Error.ID equals 14000 –> Block
The rule blocks access to all web objects when the value of the Error.ID property is 14000, which
indicates an error that prevents the Anti-Malware module from loading.
The action settings specify a message to a user who requested access.
Block if Anti-Malware engine is overloaded
Error.ID equals 14001 –> Block
The rule blocks access to all web objects when the value of the Error.ID property is 14001, which
indicates all connections to the Anti-Malware module are currently in use and the module is
overloaded.
The action settings specify a message to a user who requested access.
312 McAfee Web Gateway 7.1.5 Product Guide